
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json)
Hash identifier: Wolv3ZGD5V3Mr2nAE0H6zcOMUPOp7mUA91qQySiCxL0=
Subject key identifier: 70:2C:0D:1C:0A:D9:C9:DC:6E:60:75:3D:99:F0:E4:F7:FF:DE:D7:1F
Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
Manifest number: 0CD4
Signing time: Thu 24 Sep 2026 18:26:16 +0000
Manifest this update: Thu 24 Sep 2026 18:26:15 +0000
Manifest next update: Thu 01 Oct 2026 18:26:15 +0000
Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: Q6HKtZk2rbbD0jomrzk1NinM5twUBUWFfpqRy6TNGS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Validity
Not Before: Sep 24 18:26:15 2026 GMT
Not After : Oct 1 18:26:15 2026 GMT
Subject: CN=6ab56b48-32dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:c0:2a:ae:15:4a:5c:9d:f6:46:49:fe:10:
a9:32:95:2b:f0:1b:6e:6f:e6:45:13:28:13:ef:6f:
a6:c2:03:ae:76:14:f7:eb:7b:ef:aa:6b:c3:f4:ad:
a0:24:f4:e9:00:c0:06:6b:5f:3b:fa:01:9e:fb:86:
80:73:8b:82:43:2c:5f:84:83:65:0e:22:25:bf:f4:
4b:7a:b7:48:19:f1:6f:b1:55:f6:34:70:f9:3f:fa:
6b:a6:22:94:69:02:4d:39:95:af:7a:80:ea:f2:e2:
da:ed:f8:70:f1:53:4a:69:2c:69:58:cf:47:c5:e0:
13:56:c8:1b:10:70:b4:50:92:4d:2f:f2:4e:5e:7a:
65:0a:70:b6:3c:a7:3f:ae:8c:05:df:e2:2f:8f:73:
0c:06:2c:c7:a8:7e:2c:d8:bb:11:d1:44:34:17:9a:
25:dc:42:2f:cf:67:0a:e6:11:03:c2:9e:9e:e0:95:
1f:95:5d:ee:c1:2d:94:68:be:f5:4b:99:b8:ae:55:
89:f7:64:54:10:32:7b:1c:b8:7b:5f:aa:3b:7d:b5:
15:45:1a:f7:18:8f:bd:52:c2:b3:8b:f9:c2:ef:28:
6a:6a:64:38:de:c9:20:b6:6d:33:d1:98:a9:00:fd:
00:79:bc:4e:dc:68:6d:6f:55:4c:09:d9:80:c7:d5:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:0D:1C:0A:D9:C9:DC:6E:60:75:3D:99:F0:E4:F7:FF:DE:D7:1F
X509v3 Authority Key Identifier:
keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:a8:c3:fe:1f:46:24:06:64:a0:d4:49:19:3a:46:fd:34:
0f:98:b2:9d:a2:c4:15:96:ce:a8:88:91:a0:4f:95:97:4e:06:
9c:88:3e:d3:c5:02:18:4f:7c:a1:15:b2:a4:98:ba:ad:5c:51:
2c:6f:4d:73:be:4b:37:76:e8:05:ed:11:c5:d2:27:55:1f:c8:
15:75:41:78:ba:28:e5:34:6b:fe:e0:cc:ee:a8:23:02:18:d1:
ac:22:4c:a5:0c:00:d5:20:95:79:ce:e9:09:30:00:54:1a:b9:
47:19:b5:62:75:8a:52:46:a5:52:e0:7c:b2:5c:b7:8c:13:a0:
0e:0c:55:77:73:a1:aa:ea:c0:26:cc:bc:f5:55:df:d1:d1:c4:
6f:9c:5c:b0:01:a3:db:13:72:36:84:54:31:61:be:02:0f:71:
0f:40:34:1c:81:bb:45:b5:fb:59:af:60:4d:f3:40:ea:30:fa:
63:5e:ae:fc:68:67:33:4d:62:79:a3:d9:17:a8:a5:9e:06:b6:
c2:12:ad:43:7c:69:86:07:4c:8e:05:42:df:cf:a7:c9:4f:4d:
2e:96:19:fb:29:eb:c6:99:d9:9a:32:ee:e0:2c:e3:cd:fb:ec:
1c:e3:08:14:81:74:6b:1e:5e:62:6b:9f:39:78:8c:69:05:a2:
b6:80:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:49:40 2026 by rpki-client